Glean updated its AI addendum, adding new security and governance capabilities including prompt injection detection at 96.9% accuracy and unstructured data scanning at 95% accuracy, alongside the AWAR…
Five recent AI agent security incidents — RovoBlast, Ghostjacking, RufRoot, Paperclip, and the PocketOS accident — traced back to authentication, authorization, and input validation failures rather th…
Varonis launched the Varonis Triage Agent, an AI incident researcher that investigates security alerts by gathering evidence and testing explanations, saving MDDR analysts an average of 16.4 hours per…
Palo Alto Networks' Unit 42 researchers induced an AI agent running on AWS AgentCore to hand over credentials from the platform's encrypted vault by feeding it a malicious support ticket, after which …
Varonis launched Data Lifecycle Management (DLM), a new capability built on the Varonis Data Security Platform that automatically finds and quarantines redundant, obsolete, and trivial (ROT) data acro…
Aikido Security leads the 2026 DSPM market with a code-based approach that traces sensitive data through application code, identifying exact file and line exposures with pull-request fixes in minutes,…
Mandiant published the architecture and early results of its Agentic Vulnerability Discovery Harness on August 18, reporting that the system found more than 100 true-positive critical vulnerabilities …
Microsoft on Tuesday patched a critical one-click vulnerability in its personal Copilot AI assistant, nearly eight months after security firm Varonis reported the flaw, which allowed attackers to exec…
Security researchers at Varonis demonstrated that Microsoft 365 Copilot could be manipulated to exfiltrate sensitive data without user interaction. By asking Copilot about its own protections, they di…
Researchers at security firm Varonis exploited Microsoft 365 Copilot Enterprise by tricking the AI into revealing an undocumented parameter (?autorun=1) that bypassed user consent, allowing data exfil…
Researchers at Varonis demonstrated a one-click prompt injection attack against Atlassian's Rovo AI assistant at DEF CON 34, exploiting the rovoChatPrompt parameter to leak sensitive data across conne…
At DEF CON 34, Varonis researchers demonstrated a one-click prompt injection attack, dubbed RovoBlast, against Atlassian's enterprise AI assistant Rovo, which could expose sensitive data across connec…
Varonis announced Agent Intent-Based Access Control (IBAC), a new capability in Varonis Atlas that monitors AI agents' actions against their instructions in real time, alerting or blocking out-of-poli…
Varonis CEO Yaki Faitelson and VP of Strategy Ron Bennatan identified five AI security challenges for 2026, all centering on the reality that AI security is data security. They argue that enterprise A…
On July 16, 2026, HuggingFace disclosed a security breach in which an autonomous AI attacker infiltrated its internal infrastructure by chaining two remote code execution vulnerabilities in its datase…
Perimeter-based email defenses miss AI-generated attacks that carry no obvious malicious link or attachment, according to a new report from Software Analyst Cyber Research (SACR). The report says emai…
AI agents are creating a new class of employee risk by operating autonomously with access to sensitive data, as highlighted by Varonis in a blog post. The post cites an incident where Cursor, a coding…
Varonis Atlas now secures the entire Claude enterprise suite, including Claude Code and Claude Cowork, making it one of the few AI security platforms covering Anthropic's full agentic portfolio. The p…
Varonis launched Atlas, the first AI security platform dedicated to securing Cursor and the agentic development lifecycle, providing real-time visibility and control over coding agents that access sen…
Varonis Threat Labs researchers Doron Kapah and Mark Vaitsman launched Breach at the Beach, a Capture The Flag (CTF) training experience designed to teach security practitioners how to detect and resp…